phpmyadmin kayıtları
phpmyadmin üreticisine ait 270 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %0,4
- Silahlaştırılmış
- 6 · %2,2
- Pre-auth RCE
- 21
- Düzeltme kaydı olan
- %95,2
- Yayından KEV’e ortanca
- 4747 gün
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')80
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor29
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')19
- CWE-20 Improper Input Validation19
- CWE-254 7PK - Security Features13
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')9
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
270 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
98Hemen | CVE-2009-1151Silahlaştırılmış | Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to injephpmyadmin · phpmyadmin · CWE-94 | Kritik9,8 | KEV | %96,6 | 26 Mar 2009 |
65Bu hafta | CVE-2018-12613Silahlaştırılmış | An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the servephpmyadmin · phpmyadmin · CWE-287 | Yüksek8,8 | — | %98,4 | 21 Haz 2018 |
63Bu hafta | CVE-2016-5734Silahlaştırılmış | phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the pphpmyadmin · phpmyadmin · CWE-94 | Kritik9,8 | — | %81,4 | 2 Tem 2016 |
59Planlayın | CVE-2020-26935Kavram kanıtı | An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3.phpmyadmin · phpmyadmin · CWE-89 | Kritik9,8 | — | %67,1 | 10 Eki 2020 |
52Planlayın | CVE-2012-5159Silahlaştırılmış | phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introducedphpmyadmin · phpmyadmin · CWE-94 | Yüksek7,5 | — | %74,5 | 25 Eyl 2012 |
47Planlayın | CVE-2020-5504Kavram kanıtı | In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page.phpmyadmin · phpmyadmin · CWE-89 | Yüksek8,8 | — | %38,8 | 9 Oca 2020 |
43Planlayın | CVE-2004-1147Kavram kanıtı | phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary cphpmyadmin · phpmyadmin | Kritik10,0 | — | %11,6 | 10 Oca 2005 |
41Planlayın | CVE-2008-7252İstismar yok | libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and atphpmyadmin · phpmyadmin · CWE-310 | Kritik10,0 | — | %2,7 | 19 Oca 2010 |
41Planlayın | CVE-2008-7251İstismar yok | libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact aphpmyadmin · phpmyadmin · CWE-264 | Kritik10,0 | — | %2,7 | 19 Oca 2010 |
41Planlayın | CVE-2007-0203İstismar yok | Multiple unspecified vulnerabilities in phpMyAdmin before 2.9.2-rc1 have unknown impact and attack vectors.phpmyadmin · phpmyadmin | Kritik10,0 | — | %1,9 | 11 Oca 2007 |
40Planlayın | CVE-2019-11768İstismar yok | An issue was discovered in phpMyAdmin before 4.9.0.1.phpmyadmin · phpmyadmin · CWE-89 | Kritik9,8 | — | %3,6 | 5 Haz 2019 |
40Planlayın | CVE-2019-6798İstismar yok | An issue was discovered in phpMyAdmin before 4.8.5.phpmyadmin · phpmyadmin · CWE-89 | Kritik9,8 | — | %3,5 | 26 Oca 2019 |
40Planlayın | CVE-2016-6629İstismar yok | An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive.phpmyadmin · phpmyadmin · CWE-254 | Kritik9,8 | — | %3,2 | 10 Ara 2016 |
40Planlayın | CVE-2016-6620İstismar yok | An issue was discovered in phpMyAdmin.phpmyadmin · phpmyadmin · CWE-502 | Kritik9,8 | — | %3,2 | 10 Ara 2016 |
40Planlayın | CVE-2017-18264İstismar yok | An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases.phpmyadmin · phpmyadmin | Kritik9,8 | — | %2,8 | 1 May 2018 |
40Planlayın | CVE-2019-19617İstismar yok | phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/phpmyadmin · phpmyadmin | Kritik9,8 | — | %2,6 | 5 Ara 2019 |
40Planlayın | CVE-2016-5703İstismar yok | SQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote atphpmyadmin · phpmyadmin · CWE-89 | Kritik9,8 | — | %2,3 | 2 Tem 2016 |
40Planlayın | CVE-2016-9865İstismar yok | An issue was discovered in phpMyAdmin.phpmyadmin · phpmyadmin · CWE-254 | Kritik9,8 | — | %2,3 | 10 Ara 2016 |
40Planlayın | CVE-2019-18622İstismar yok | An issue was discovered in phpMyAdmin before 4.9.2.phpmyadmin · phpmyadmin · CWE-89 | Kritik9,8 | — | %2,2 | 22 Kas 2019 |
40Planlayın | CVE-2016-9849İstismar yok | An issue was discovered in phpMyAdmin.phpmyadmin · phpmyadmin · CWE-264 | Kritik9,8 | — | %2,0 | 10 Ara 2016 |
40Planlayın | CVE-2020-22452İstismar yok | SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_enginphpmyadmin · phpmyadmin · CWE-89 | Kritik9,8 | — | %1,7 | 26 Oca 2023 |
39İzleyin | CVE-2016-9866İstismar yok | An issue was discovered in phpMyAdmin.phpmyadmin · phpmyadmin · CWE-352 | Kritik9,8 | — | %1,0 | 10 Ara 2016 |
38İzleyin | CVE-2017-1000499Kavram kanıtı | phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness.phpmyadmin · phpmyadmin · CWE-352 | Yüksek8,8 | — | %8,5 | 3 Oca 2018 |
37İzleyin | CVE-2012-5469Kavram kanıtı | The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console accphpmyadmin · phpmyadmin · CWE-264 | Yüksek7,5 | — | %23,7 | 20 Ara 2012 |
37İzleyin | CVE-2008-4096Kavram kanıtı | libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a requestphpmyadmin · phpmyadmin · CWE-20 | Yüksek8,5 | — | %11,2 | 18 Eyl 2008 |
- CVE-2009-115198Hemen
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inje
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97phpmyadmin · phpmyadmin26 Mar 2009
- CVE-2018-1261365Bu hafta
An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the serve
YüksekCVSS 8,8SilahlaştırılmışEPSS %98phpmyadmin · phpmyadmin21 Haz 2018
- CVE-2016-573463Bu hafta
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the p
KritikCVSS 9,8SilahlaştırılmışEPSS %81phpmyadmin · phpmyadmin2 Tem 2016
- CVE-2020-2693559Planlayın
An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3.
KritikCVSS 9,8Kavram kanıtıEPSS %67phpmyadmin · phpmyadmin10 Eki 2020
- CVE-2012-515952Planlayın
phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced
YüksekCVSS 7,5SilahlaştırılmışEPSS %75phpmyadmin · phpmyadmin25 Eyl 2012
- CVE-2020-550447Planlayın
In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page.
YüksekCVSS 8,8Kavram kanıtıEPSS %39phpmyadmin · phpmyadmin9 Oca 2020
- CVE-2004-114743Planlayın
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary c
KritikCVSS 10,0Kavram kanıtıEPSS %12phpmyadmin · phpmyadmin10 Oca 2005
- CVE-2008-725241Planlayın
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and at
KritikCVSS 10,0İstismar yokEPSS %3phpmyadmin · phpmyadmin19 Oca 2010
- CVE-2008-725141Planlayın
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact a
KritikCVSS 10,0İstismar yokEPSS %3phpmyadmin · phpmyadmin19 Oca 2010
- CVE-2007-020341Planlayın
Multiple unspecified vulnerabilities in phpMyAdmin before 2.9.2-rc1 have unknown impact and attack vectors.
KritikCVSS 10,0İstismar yokEPSS %2phpmyadmin · phpmyadmin11 Oca 2007
- CVE-2019-1176840Planlayın
An issue was discovered in phpMyAdmin before 4.9.0.1.
KritikCVSS 9,8İstismar yokEPSS %4phpmyadmin · phpmyadmin5 Haz 2019
- CVE-2019-679840Planlayın
An issue was discovered in phpMyAdmin before 4.8.5.
KritikCVSS 9,8İstismar yokEPSS %3phpmyadmin · phpmyadmin26 Oca 2019
- CVE-2016-662940Planlayın
An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive.
KritikCVSS 9,8İstismar yokEPSS %3phpmyadmin · phpmyadmin10 Ara 2016
- CVE-2016-662040Planlayın
An issue was discovered in phpMyAdmin.
KritikCVSS 9,8İstismar yokEPSS %3phpmyadmin · phpmyadmin10 Ara 2016
- CVE-2017-1826440Planlayın
An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases.
KritikCVSS 9,8İstismar yokEPSS %3phpmyadmin · phpmyadmin1 May 2018
- CVE-2019-1961740Planlayın
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/
KritikCVSS 9,8İstismar yokEPSS %3phpmyadmin · phpmyadmin5 Ara 2019
- CVE-2016-570340Planlayın
SQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote at
KritikCVSS 9,8İstismar yokEPSS %2phpmyadmin · phpmyadmin2 Tem 2016
- CVE-2016-986540Planlayın
An issue was discovered in phpMyAdmin.
KritikCVSS 9,8İstismar yokEPSS %2phpmyadmin · phpmyadmin10 Ara 2016
- CVE-2019-1862240Planlayın
An issue was discovered in phpMyAdmin before 4.9.2.
KritikCVSS 9,8İstismar yokEPSS %2phpmyadmin · phpmyadmin22 Kas 2019
- CVE-2016-984940Planlayın
An issue was discovered in phpMyAdmin.
KritikCVSS 9,8İstismar yokEPSS %2phpmyadmin · phpmyadmin10 Ara 2016
- CVE-2020-2245240Planlayın
SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engin
KritikCVSS 9,8İstismar yokEPSS %2phpmyadmin · phpmyadmin26 Oca 2023
- CVE-2016-986639İzleyin
An issue was discovered in phpMyAdmin.
KritikCVSS 9,8İstismar yokEPSS %1phpmyadmin · phpmyadmin10 Ara 2016
- CVE-2017-100049938İzleyin
phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness.
YüksekCVSS 8,8Kavram kanıtıEPSS %8phpmyadmin · phpmyadmin3 Oca 2018
- CVE-2012-546937İzleyin
The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console acc
YüksekCVSS 7,5Kavram kanıtıEPSS %24phpmyadmin · phpmyadmin20 Ara 2012
- CVE-2008-409637İzleyin
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request
YüksekCVSS 8,5Kavram kanıtıEPSS %11phpmyadmin · phpmyadmin18 Eyl 2008